CVE-2025-15493

creationtimestamp| type| source ---|---|--- 2026-01-09 18:06:19+00:00| seen| Telegram/ggttxZlZstNJAeAGMjqlbTwrWMMy661VkhxBCQCCiwWZxQ 2026-01-09 19:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz6sj2jnj2e...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22194

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2026-22194

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2025-38707

creationtimestamp| type| source ---|---|--- 2026-01-09 17:04:42+00:00| seen| Telegram/M8lCkLIsJ6RguqIkbBdJSwooeArTn9SVHqn8Se6ECrpQ 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-69425

creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 18:06:42+00:00| published-proof-of-concept| Telegram/gIeROQChpfUKACGacrlMOrd91yuCBo48O9eluSl9WxyqbYI 2026-01-09 18:06:54+00:00| seen|...

CVE-2026-22196

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22196 GestSup < 3.2.60 SQL Injection in Ticket Creation

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22196 GestSup < 3.2.60 SQL Injection in Ticket Creation

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...

CVE-2026-22196

GestSo p GestSup is a web-based ticket/IT service management software. A SQL injection exists in the ticket creation path caused by user-controlled input that is embedded in SQL queries without sufficient neutralization. This vulnerability could let an authenticated attacker manipulate database q...

CVE-2026-22194 GestSup <= 3.2.60 CSRF Allows Privileged Actions

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2026-22194

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

CVE-2026-22194

GestSup

CVE-2026-22194 GestSup <= 3.2.60 CSRF Allows Privileged Actions

GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...

X Didn’t Fix Grok's ‘Undressing’ Problem. It Just Makes People Pay for It

X is allowing only “verified” users to create images with Grok. Experts say it represents the “monetization of abuse”—and anyone can still generate images on Grok’s app and website...

CVE-2025-38572

creationtimestamp| type| source ---|---|--- 2026-01-09 14:00:57+00:00| seen| Telegram/2UoQm8sZDTht6QqZwOXVacuI3v2P0mjkqFyF4oI5Ar6Fvk 2026-01-19 10:56:42+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcri7esng22r 2026-01-20 11:16:10+00:00| seen|...

CVE-2025-38579

creationtimestamp| type| source ---|---|--- 2026-01-09 14:00:57+00:00| seen| Telegram/2UoQm8sZDTht6QqZwOXVacuI3v2P0mjkqFyF4oI5Ar6Fvk...

CVE-2025-66051

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:43+00:00| published-proof-of-concept| Telegram/lQa5Bf1VzuIWjy0I3eIwnAwZ1-XZwzRDF1rwq6cLSRe8 2026-01-09 15:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbytez3zfs2y...

CVE-2025-66052

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:43+00:00| published-proof-of-concept| Telegram/lQa5Bf1VzuIWjy0I3eIwnAwZ1-XZwzRDF1rwq6cLSRe8 2026-01-09 15:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbytnxjtq22x...